Archive
6 June 2023
Vulnerabilities first published on this day (UTC), newest first.
149 results · Feed
-
High 7.5
Improper authorization in Modem
Transient DOS due to improper authorization in Modem
-
High 8.4
Double free in Core
Memory corruption due to double free in Core while mapping HLOS address to the list.
-
High 8.4
Double free in Automotive
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
-
Medium 5.5
Uncontrolled resource consumption in Linux kernel
Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.
-
Medium 6.7
Improper restriction of operations within the bounds of memory buffer in Linux
Memory corruption in Linux while sending DRM request.
-
High 7.9
Stack-based buffer overflow in Modem
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
-
Medium 6.7
Use after free in Core
Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem because of invalid network configuration.
-
Medium 6.7
Incorrect type conversion or cast in Audio
Memory corruption in Audio due to incorrect type cast during audio use-cases.
-
Medium 6.7
Buffer copy without checking the size of input in FM Host
Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
-
Medium 6.7
Double free in Linux-Android
Memory corruption in Linux android due to double free while calling unregister provider after register call.
-
Medium 6.7
Buffer copy without checking the size of input in Core
Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
-
Medium 6.7
Buffer copy without checking the size of input in Core
Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
-
High 7.1
Cryptographic issue in Core
information disclosure due to cryptographic issue in Core during RPMB read request.
-
High 7.5
Reachable Assertion in Modem
Assertion occurs while processing Reconfiguration message due to improper validation
-
Medium 5.5
In email service, there is a missing permission check. This could lead to local information disclosure with no addition…
-
Medium 5.5
In email service, there is a missing permission check. This could lead to local information disclosure with no addition…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 5.5
In dialer service, there is a missing permission check. This could lead to local information disclosure with no additio…
-
High 7.8
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege…
-
High 7.8
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege…
-
Medium 5.5
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 5.5
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 5.5
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 5.9
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 5.9
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 5.9
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 6.2
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no add…
-
Medium 6.2
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no add…
-
Medium 6.2
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no add…
-
Medium 4.4
In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local deni…
-
High 7.3
In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local deni…
-
High 7.8
In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with …
-
Medium 5.5
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
High 7.3
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege wi…
-
Low 3.5
Arborator Server project.cgi start denial of service
A vulnerability classified as problematic was found in Arborator Server. This vulnerability affects the function start of the file project.cgi. The manipulation of the argument project leads to denial of service. Continious delivery with rolling releases is u…
-
Medium —
trust-dns vulnerable to Remote Attackers causing Denial-of-Service (packet loops) with crafted DNS packets
trust-dns and trust-dns-server are vulnerable to remotely triggered denial-of-service attacks, consuming both network and CPU resources. DNS messages with the QR=1 bit set are responded to with a `FormErr` response. This allows creating a traffic loop, in whi…
-
Low 3.5
Fuzzy SWMP GET Parameter swmp.php cross site scripting
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Fuzzy SWMP. It has been rated as problematic. This issue affects some unknown processing of the file swmp.php of the component GET Parameter Handler. The manipulation of the argument theme leads to …
-
Low 3.5
Gravity Forms DPS PxPay Plugin cross site scripting
A vulnerability, which was classified as problematic, was found in Gravity Forms DPS PxPay Plugin up to 1.4.2 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgradin…
-
High 8.8
WP User Switch <= 1.0.2 - Authenticated (Subscriber+) Authentication Bypass via Cookie
The WP User Switch plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.2. This is due to incorrect authentication checking in the 'wpus_allow_user_to_admin_bar_menu' function with the 'wpus_who_switch' cookie valu…